How Bank Statement PDF Passwords Are Built

Most statement passwords join two details the bank already holds, such as the first four letters of your name plus your date of birth (DDMM), your customer ID, or the last digits of your card or mobile number.

Banks don't pick a random password for each statement. They build it from details they already hold about you, usually two of them joined together: letters from your name, part of your date of birth, digits of your mobile, card or account number, a customer ID, or your PAN. A common Indian pattern is the first four letters of your name in capitals followed by your birth day and month, so Ravi Kumar, born 15 May 1990, would type RAVI1505.

The exact recipe differs by bank and by document, and it changes over time. The email or SMS your statement came with is the final word.

The building blocks

Piece	Typical forms	Real examples (official pages)
Name letters	First 4 letters, capitals or lowercase	Axis Bank: first 4 letters in UPPER CASE + DDMM (Axis); e-Aadhaar: first 4 letters in capitals + birth year (UIDAI)
Date of birth	DDMM, DDMMYY, DDMMYYYY, MMYYYY, YYYY	Form 26AS: DDMMYYYY (TRACES); RBL credit card: name + DDMMYY (RBL); Kotak credit card: usually MMYYYY (Kotak)
Customer ID	Customer ID, CRN or CIF, digits only	HDFC Bank NetBanking statements: Customer ID (HDFC Bank); IndusInd: 8-digit Customer ID as an alternative (IndusInd)
Card digits	Last 4 digits of the card	ICICI Bank credit card: last 4 digits (ICICI Bank)
Mobile digits	Last 4 or 5 digits of the registered mobile	IOB mobile banking statement: first 4 digits of CIF + last 4 of mobile (IOB)
PAN	PAN in capitals or lowercase, sometimes + DOB	NSDL e-CAS: PAN in capitals (NSDL); AIS: PAN in lowercase + DDMMYYYY (Income Tax Department); Upstox contract notes: PAN in lowercase (Upstox)
Your own choice	A password you typed when requesting the statement	SBI ESTMT SMS: the 4 digits you put in the SMS (SBI); CAMS CAS: the password you set in the form (CAMS)

Outside India

The idea is the same, but the pieces differ. Philippine BDO credit card statements use the date of birth with a three-letter month, such as Sep141991 (BDO). Malaysia's RHB uses the last 4 characters of your MyKad or passport plus birth date as YYMMDD (RHB). Nepal's Everest Bank uses birth year and month plus the last 3 digits of the account number (Everest Bank).

Rules that trip people up

• Capitals matter. Axis wants RAVI; Upstox wants a lowercase PAN. Same idea, different case.
• Your name as the bank has it. If the account says “K S MATHEW”, the first four letters may be KSMA. Federal Bank ignores spaces and punctuation (Federal Bank), but UIDAI counts spaces and dots in e-Aadhaar names (UIDAI).
• Short names are often used in full, with no padding. UIDAI says so for e-Aadhaar.
• Companies and firms use the business name and date of incorporation instead of a person's name and birth date.
• One bank, several formats. An account statement, a credit card bill and a loan letter from the same bank can each use a different password.
• Old statements may use an older format. BDO, for example, changed its format on 15 June 2025.

Find your bank's format

Start with our guides, which link to each bank's own page: SBI, HDFC Bank, ICICI Bank, Axis Bank, Kotak, Federal Bank, IndusInd, Canara Bank, Union Bank, e-Aadhaar, Form 26AS. If the date part confuses you, see DDMM, DDMMYY and DDMMYYYY explained.

Once it opens, you can save an unlocked copy so you don't have to rebuild the password each month. UnKey does this offline on iPhone, iPad and Mac, and can keep the password in the Keychain behind Face ID for next month's statement.

Questions

Sources

• Axis Bank – Credit card / statement password support page
• UIDAI – What is the password of e-Aadhaar?
• TRACES – Form 26AS FAQ
• RBL Bank – FAQs (PDF)
• Kotak Mahindra Bank – What is a credit card statement
• HDFC Bank – NetBanking FAQs
• IndusInd Bank – Statement of Account emailer
• ICICI Bank – Credit card statement online
• Indian Overseas Bank – Mobile banking user manual
• NSDL – FAQs on CAS
• Income Tax Department – Steps to access AIS online
• Upstox – Accessing contract notes
• SBI – SBI Quick
• CAMS – Consolidated Account Statement
• BDO – New eSOA password
• RHB – Statement FAQ
• Everest Bank – E-statement
• Federal Bank – How to download account statement

Formats can change. If a password doesn't work, check the email the document came with or contact the issuer. UnKey isn't affiliated with any bank, employer or authority named here.